中国科学院大学学报2014，Vol.31Issue(6)：827-835,9.DOI:10.7523/j.issn.2095-6134.2014.06.015
基于Fuzzing的Android应用通信过程漏洞挖掘技术
Android inter-application communication vulnerability mining technique based on Fuzzing
摘要
Abstract
If an Android application could not protect its private components well in the process of inter-application communication,there would exist exposed component vulnerabilities.The current vulnerability mining technique cannot identify such vulnerabilities accurately.To solve this problem,we propose a new vulnerability mining method which combines Fuzzing with reverse analysis,and design a vulnerability mining tool named KMDroid.Experimental results show that KMDroid can discover the vulnerability of inter-application communication effectively.关键词
Android/Fuzzing/逆向分析/应用通信/安全漏洞Key words
Android / Fuzzing/ reverse analysis/ inter-application communication / vulnerabilities分类
信息技术与安全科学引用本文复制引用
王凯,刘奇旭,张玉清..基于Fuzzing的Android应用通信过程漏洞挖掘技术[J].中国科学院大学学报,2014,31(6):827-835,9.基金项目
国家自然科学基金(61272481,61303239)、北京市自然科学基金(4122089)、国家发改委信息安全专项(发改办高技[2012]1424号)和中国科学院大学校长基金资助 （61272481,61303239）
